TWI407751B - System and method for verifying the identity of web site users - Google Patents

Abstract

A system and method for verifying the identity of a web site user is proposed, comprising linking a user end apparatus with a network service platform via a network system and notifying an authentication platform to verify the identity of the user; requesting the user end apparatus to input an verification code for being decoded by the authentication platform for user ID verification; transmitting the verification result to the network service platform, thereby avoiding the inconvenience of using different sets of account numbers and passwords for authentication purposes and further providing a classification mechanism that categorizes users to obtain differing levels or types of network services based on the preset verification codes.

Description

Website user identity authentication system and method

The present invention relates to a website user identity authentication system and method, and more particularly to a website user identity authentication system and method for performing identity authentication using encrypted account data and identification code.

The use of the Internet is becoming more and more popular. With the rapid development of the Internet, the construction and expansion of the Internet has gradually changed the behavior patterns of human beings. For example, due to the popularity of the Internet, most users collect information, browse knowledge, purchase goods, work, discuss issues and make friends through the Internet. As a result, a wide variety of web services platforms appear on the web, making human behavior more convenient, faster, and more technological by interacting with a variety of different online communities.

In general, users who log in to the web service platform must first register the user account and set a password. When the user has the account and password of most network service platforms, remembering a large number of accounts and passwords often causes problems for the user. If the user sets the same account number and password, once the data is leaked (for example, the hacker steals the account or the fraudulent website steals the personal data), the illegal user can easily log in to the network with the account and password, and impersonate the user. The identity of doing business on the Internet, making friends or making speeches, causing great damage to real users.

At present, the technology for automatically inputting accounts and passwords has a cookie or a registered machine code. However, such technology still has the possibility that the account and password are stolen. In addition to entering the account password, the user has to enter additional authentication passwords when performing more important actions such as online transactions and payment. Such complicated actions not only reduce the user's willingness to link to the website, but also affect the operation of the website.

On the other hand, based on convenience and cost considerations, it is a trend for multiple users to share user accounts of the same website. However, the service content provided by the general website cannot be restricted by functions or usage rights of the same user account. Causes management inconvenience. For example, the audio and video service website cannot classify audio and video content for the same user account. Therefore, the minor children in the family can browse and download the video and audio data of the restricted level as long as they obtain the password of the parent user account. Therefore, when the parent manages the user account password, Inconvenience.

However, the above conventional techniques have the following problems:

(1) Insufficient security. The identity authentication mechanism built by the operators of the Internet service platform usually only uses complicated accounts and passwords to increase the difficulty of data theft. However, after continuous trial, the hacker may still find the method of cracking, which will affect The security of the web service platform.

(2) Insufficient convenience. When a user logs in to a particular website, he or she needs to enter the account password for that particular website. However, when the user has the account password of most websites or the multiple passwords of the same website, how to find out the password of the account corresponding to the website is a major problem faced by the user of the particular website, and thus the use is not convenient.

(3) The user cannot effectively manage the content of the website service. When multiple users share the same user account, the network service platform does not have a mechanism for classifying or classifying the service content, and thus cannot manage or restrict the user's rights or website service content.

In summary, how to provide a website user identity authentication system and method that can solve the above-mentioned shortcomings of the prior art has become an urgent problem to be solved.

To solve the above-mentioned shortcomings of the prior art, the present invention provides a website user identity authentication system, which is applied to a network system. The website user identity authentication system includes: a client device; and a network service platform is through the network. The network system connects the client device to provide network service content to the client device; and the authentication platform connects the client device and the network service platform through the network system, so that the client device logs in to the In the network service platform, the authentication device performs login authentication on the client device, wherein the client device includes: a user input interface, configured to provide a user input account data, to transmit the account data to the The authentication platform performs initial authentication, and provides the user input identification code after initial authentication; the data encryption module is configured to form an encrypted file of the account data and the identification code input by the user and store the encrypted file in the user device; The information interface is used when the client device logs in to the network service platform and is authenticated by the authentication platform. Providing the public information of the client to the authentication platform, so that the authentication platform calculates the identification parameter through a preset rule; the server access interface is configured to provide the authentication platform to input the identification parameter to enable the authentication platform to be The client device retrieves the encrypted file, the authentication platform decrypts the encrypted file and retrieves the account data to confirm the identity of the user, and the client access interface is configured to request the network service from the client device. When the platform provides a specific service, the user is provided to input the identification code, and after the identification code is confirmed to be correct, the encrypted file is transmitted to the authentication platform for decryption to identify the user.

The invention further provides a website user identity authentication method, which is applied to a network system, and the website user identity authentication method comprises: (1) inputting account data into a user input interface of the user device, to use the account data Pass the authentication platform to the initial authentication, and then input the identification code after the initial authentication; (2) form the encrypted account file and the identification code into the client device; (3) log in to the user device. When the login authentication is performed by the authentication platform to the network service platform, the public information of the client device is transmitted to the authentication platform, so that the authentication platform calculates the identification parameter through a preset rule; (4) the identification parameter Entering a server access interface of the client device to enable the authentication platform to retrieve the encrypted file by the client device, and the authentication platform decrypts the encrypted file and retrieves the account data to confirm the identity of the user; (5) when the client device requests the network service platform to provide a specific service, the identifier is input into the client access interface of the client device, After confirmation code to decrypt the encrypted file to extract the information corresponding to the account number and transmitted to the authentication confirmation or computing platform.

Compared with the prior art, the website user identity authentication system and method of the present invention solves the shortcomings of the conventional website authentication system. The website user identity authentication system and method of the present invention applies a security authentication platform. When a user logs in to a specific website service system, the authentication platform replaces the website service system to perform identity authentication for the user. The identity data and the identification code are encrypted firstly by the user to form an encrypted file. After the authentication platform captures the encrypted file for decoding and comparison, the identity authentication action can be completed. Since user identity data must be encrypted and decrypted, its security is naturally higher than that of the prior art. Website service providers do not need to construct an additional authentication mechanism. For general users, the accounts of various Internet service websites can also be set to the same identification code to improve the convenience of use. Even if the hacker can obtain the user's data file, the data file cannot be decrypted. In addition, the user can set different identification codes for different service contents of the same website, and hand the identification codes to specific users. Since the user can only use the service content corresponding to the identification code, the function of classifying and classifying the service content can be implemented by implementing a single account.

The embodiments of the present invention are described below by way of specific embodiments, and those skilled in the art can readily appreciate the other advantages and advantages of the present invention. The invention may also be embodied or applied by other different embodiments.

Please refer to FIG. 1 , which is a structural diagram of a website user identity authentication system of the present invention. As shown in the figure, the website user identity authentication system of the present invention is applied to the network system 10, including the client device 11, the network service platform 12, and the authentication platform 13.

The network system 10 is used as a medium for data transmission, and the connection method can be, for example, a network connection using a wired ADSL or FTTB and/or a wireless network connection. The architecture adopted by the network security authentication system of the present invention is an internet network, but does not limit the scope of the present invention, that is, it does not exclude application to, for example, an intra-network system, an inter-organizational network system, or a regional network. The possibility of a network system such as a system, a WAN system or a virtual private network system.

The client device 11 is an electronic device that can access data and perform data processing, such as a desktop computer, a notebook computer, a personal digital assistant, and/or a mobile phone. Any device having a network connection function and having data processing and access functions can be used as the client device 11 herein.

The web service platform 12 is a website or server that provides users with various web services, such as a multimedia message providing website, an auction website, a telecommunications service website, and/or a financial service website.

The authentication platform 13 is configured to perform identity authentication on the client device that connects the network service platform 12.

The client input interface 110, the data encryption module 111, the public information interface 112, the server access interface 113, and the client access interface 114 are disposed in the client device 11.

When the invention is embodied, three authentication stages may be included. The first stage is the initial authentication. The user inputs the account data through the user input interface 110 of the client device 11 to transmit the account data to the authentication platform 13 for initial authentication. After the authentication platform 13 is correct, the user passes the initial authentication. After the authentication, the user is notified to input the corresponding identification code. When the user inputs the account data and the identification code, the data encryption module 111 forms the encrypted file and stores it in the client device 11.

The second stage is login authentication. When the user wants to log in to the network service platform 12, the network service platform 12 notifies the authentication platform 13 to perform login authentication for the user. At this time, the authentication platform 13 retrieves the public information stored in the client device 11 through the public information interface 112, and then calculates a specific identification parameter through a preset calculation rule. Then, the authentication platform 13 passes through the server access interface 114. The identification parameter is input to retrieve the encrypted file. Finally, the encrypted file is decrypted and the account data is retrieved for comparison to confirm the identity of the user. If you confirm your identity, you can tell the web service platform to accept the user's login. Therefore, the user does not need to perform any operations in the second stage of authentication, and is automatically performed by the authentication platform 13.

The third stage is the identification code authentication. If the user wants to request a specific service (for example, consumption), the user access interface 114 must input the identification code. If the user equipment confirms that the identification code is input correctly. Then, the encrypted file is transmitted to the authentication platform 13 for decryption to confirm the identity of the user. For example, in the above-mentioned consumption action, the authentication platform 13 may decrypt the encrypted file to take out the bank account data or the credit card data, so as to inform the network service platform 12 of the deduction, or the debit payment by the authentication platform 13.

Please refer to FIG. 2, which is a specific embodiment of the website user identity authentication system of the present invention. The authentication platform 23 further includes a connection unit 230, an application management unit 231, and a database unit 232.

The connection unit 230 connects to the client device 21 and the network service platform 22 through the network system 20 and transmits the data. The application management unit 231 is configured to provide users with registration and setting and authentication of various account materials, and to retrieve various public information, account information, service materials, identification codes or encrypted files. Generally, the data of the client device 21 and the network service platform may be preset in the database unit 232 of the authentication platform 23. When the authentication platform 23 obtains the encrypted file of the identity data provided by the user device 21, the database unit 232 may The encrypted file is decrypted for data comparison and authentication. The database unit 232 also stores various account materials of the client device 21 and the network service platform 22. The account information may be the identity information of the client device 21, the identity identifier, the consumption password, the parent-child lock, the account password of the network service platform, and/or the specific website service content.

In this embodiment, first, the client device 21 encrypts various identity data or account data to form an encrypted file, and then connects to the network service platform 22 through the network 20 to request login. At this time, the network service platform 22 actively and the authentication platform. The connection unit 230 of 23 is connected and notifies the authentication platform 23 to perform identity authentication on the client device 21. The authentication platform 23 actively connects with the client device 21 through the connection unit 230 and retrieves the encrypted file by using the application management unit 231 to decrypt the encrypted file to obtain the user identity data. After the database unit 232 compares the identity data to confirm that the client device 21 is a legitimate user, the authentication result is transmitted back to the network service platform 22 to enable the platform to allow the user device 21 to log in and obtain the use authorization.

Please refer to FIG. 3 again, which is another specific embodiment of the website user identity authentication system of the present invention. The embodiment includes a user computer 31, an audio-visual service website 32a, an auction website 32b, a financial service website 32c, and an identity authentication platform 33 connected via the Ethernet 30. The user computer 31 can be owned by different or the same users, and the present invention can be implemented in various kinds of websites in addition to the above-mentioned website types.

The user computer 31 has data encryption software for encrypting the account number, password, identification code and identity data of the individual websites. When the website needs to perform login authentication, it can be seen from the description of FIG. 3 that the identity authentication platform 33 can automatically complete all authentication actions. The identity authentication platform 33 includes a webpage connection host 330, a user profile management host 331, and a database host 332 for providing user computer 31 for connection, registration, data setting, data retrieval, identity authentication, and data storage.

For specific implementation, initial certification is required. The user sets the identity data and the account passwords of the corresponding audio-visual service website 32a, the auction website 32b, and the financial service website 32c on the user computer 31, and then sets a group of identification codes after the initial authentication by the identity authentication platform 33 to replace the account number of the website. password. The user computer 31 must perform an encryption operation before storing the above data. The purpose of the user computer 31 is to prevent the hacker from intercepting the data transmission, so the security of the data is enhanced by encryption. Once the encryption is complete and stored, the initial certification process is completed.

During the login authentication process, the user computer 31 can choose to log in to the video service website 32a via the Ethernet 30. At this time, the video service website 32a actively connects with the identity authentication platform 33 and requests identity authentication for the user computer 31. The identity authentication platform 33 retrieves the encrypted file from the user data management host 331 through the interface of the user computer 31, and decrypts the encrypted file to obtain the identity data set in the user setting process. The database host 332 then compares the identity data or transmits the identity data back to the video service website 32a for comparison. When it is confirmed that the user computer 31 is a legitimate user, the identity authentication platform 33 transmits the authentication result back to the video service website 32a so that the website allows the user computer 31 to log in and obtain authorization to use the video service.

When the user computer 31 pays the video service website 32a, the identification code is input into the user access interface of the user computer 31, and after the identification code is confirmed, the encrypted file is transmitted to the identity authentication platform 33 for decryption. The user confirms the identity, performs the deduction operation after confirming the error, or hands over the debit account information to the video service website 32a to perform the deduction.

In a preferred embodiment, the user computer 31 can set a parent-child lock in the initial authentication process, wherein the parent-child lock is a certificate identification code corresponding to different audio-visual services of the video service website 32a. For example, the video service website 32a provides a plurality of different types of videos. Since the restricted-level videos are not suitable for the minors to view, the user can set different identification codes according to different service contents for the account of the same audio-visual service website 32a. Parent-child locks can be set to restrict users from watching pornography, violence, etc., so parents can use the setting of parent-child lock to achieve the effect of film grading and control.

Referring to Figure 4, there is shown a flow chart of a method for authenticating a user identity of a website of the present invention. As shown in the figure, the website user identity authentication method is applied to the above-mentioned website user identity authentication system, which includes the following steps.

In step S40, the account data is input into the user input interface of the client device, and the account data is transmitted to the authentication platform for initial authentication, and the identification code is input after the initial authentication. The client device can be a desktop computer, a notebook computer, a personal digital assistant, and/or a mobile phone. The network system can be an internet network, an intra-organizational network system, an inter-organizational network system, a regional network system, a wide area network system, and/or a virtual private network system. Then it proceeds to step S41.

In step S41, the input account data and the identification code are formed into an encrypted file and stored in the client device. Then it proceeds to step S42.

In step S42, when the client device logs in to the network service platform and the login authentication is performed by the authentication platform, the public information of the client device is transmitted to the authentication platform, so that the authentication platform calculates the rule through the preset rule. Identify the parameters. The web service platform can be an auction website, a dating website, a video service website, a telecommunications service website, and/or a financial service website. Then it proceeds to step S43.

In step S43, the identification parameter is input to the server access interface of the client device, so that the authentication platform retrieves the encrypted file from the client device, and the authentication platform decrypts the encrypted file and retrieves the account data. To confirm the identity of the user. Then it proceeds to step S44.

In step S44, when the client device requests the network service platform to provide a specific service, the identifier is input into the client access interface of the client device, and the encrypted file is transmitted to the identifier after the identifier is confirmed. The authentication platform decrypts to authenticate the user.

Referring to FIG. 5, it is a flowchart of a specific embodiment of a method for authenticating a user of a website of the present invention.

In step S50, the user sets the identification code, the consumption password, the identity data, and the parent-child lock that restricts the specific content at the initial authentication. In a preferred embodiment, the user can set a parent-child lock for the video content of the restricted level. Then it proceeds to step S51.

In step S51, the user encrypts the account data and stores the encrypted encrypted file in the client device. Then it proceeds to step S52.

In step S52, the user connects to the video service website. However, the video service website is only an example, and the method of the present invention can be applied to different kinds of network service platforms, such as auction websites, telecommunication service websites, and/or financial service websites. Then it proceeds to step S53.

In step S53, the video service website requests the authentication platform to perform login authentication for the user. Then it proceeds to step S54.

In step S54, the authentication platform retrieves the encrypted file from the client device. Then it proceeds to step S55.

In step S55, the authentication platform decrypts the encrypted file to retrieve the account data and compare and verify the identity data stored in the database. Then it proceeds to step S56.

In step S56, after passing the verification, the authentication system transmits the authentication result to the video service website to complete the user authorization. Users can use the content of the audio and video service website at will. In a preferred embodiment, the user can pre-set the payment data (such as a financial card account number, a credit card number, or a transfer account number) and encrypt it, and then set a corresponding paying password. When the video service website requires the user to pay, through the authentication platform of the present invention, the user only needs to input the payment password, and the authentication platform can actively retrieve the encrypted encrypted data file and decrypt it to obtain the paid data, and notify the video service website. Complete the payment action.

Therefore, the description of the above embodiments shows that the website user identity authentication system and method of the present invention can be applied to different network service platforms, and provides an integrated authentication method to ensure that users connect to the network service platform. Security and convenience, and provide users with restrictions and management of the content of specific website services.

Through the foregoing website user authentication system and method of the present invention, the following effects can be achieved.

(1) Resolve the information security risks arising from the leakage of identity data through encryption.

(2) Replacing the account password of the website with a single identification code to increase the convenience of the user in performing identity authentication.

(3) Different authentication codes are set for different website service contents to facilitate user management and restriction of specific website service contents.

In summary, the website user identity authentication system and method of the present invention provide an identity authentication system that can be applied to different network service platforms, and can reduce the memory of a general network service and input and input a plurality of different account passwords. Convenience, the use of data encryption and decryption mechanisms to reduce the information security risks arising from the leakage of personal identity data and to provide users with the classification and management of specific website services.

The above embodiments are merely illustrative of the principles of the invention and its advantages, and are not intended to limit the invention. Modifications and variations of the above-described embodiments can be made by those skilled in the art without departing from the spirit and scope of the invention.

10. . . Network system

11. . . Client device

110. . . Client input interface

111. . . Data encryption module

112. . . Public information interface

113. . . Servo access interface

114. . . Client access interface

12. . . Network service platform

13. . . Certification platform

20. . . Network system

twenty one. . . Client device

twenty two. . . Network service platform

twenty three. . . Certification platform

230. . . Connection unit

231. . . Application management unit

232. . . Database unit

30. . . Ethernet

31. . . User computer

32a. . . Video service website

32b. . . Auction site

32c. . . Financial services website

33. . . Identity certification platform

330. . . Web connection host

331. . . User data management host

332. . . Database host

S40~S44. . . step

S50~S56. . . step

1 is an architectural diagram of a website user identity authentication system of the present invention;

2 is an architectural diagram of a specific embodiment of a website user identity authentication system of the present invention;

3 is an architectural diagram of another embodiment of a website user identity authentication system of the present invention;

4 is a flow chart of a method for authenticating a website user identity according to the present invention;

FIG. 5 is a flow chart of a specific embodiment of a method for authenticating a website user identity according to the present invention.

10. . . Network system

11. . . Client device

110. . . Client input interface

111. . . Data encryption module

112. . . Public information interface

113. . . Servo access interface

114. . . Client access interface

12. . . Network service platform

13. . . Certification platform

Claims (14)

A website user identity authentication system is applied to a network system, and the website user identity authentication system comprises: a client device; and a network service platform, the network device is connected to the client device to provide a network The service device is provided to the client device; and the authentication platform connects the client device and the network service platform through the network system, so that when the client device logs in to the network service platform, the authentication platform is The client device performs login authentication, wherein the client device includes: a user input interface, configured to provide a user input account data, to transmit the account data to the authentication platform for initial authentication, and after the initial authentication Providing the user input identification code; the data encryption module is configured to form an encrypted file of the account data and the identification code input by the user and stored in the user device; and the public information interface is used to log in to the user device Providing the public information of the user terminal to the authentication platform when the network service platform is used for login authentication by the authentication platform The identification parameter is calculated by the authentication platform through a preset rule; the server access interface is configured to provide the authentication platform to input the identification parameter, so that the authentication platform captures the encrypted file by the user device, and the authentication The platform decrypts the encrypted file and retrieves the account data to confirm the identity of the user; and the client access interface is configured to provide the user input when the client device requests the network service platform to provide a specific service. The identification code is transmitted to the authentication platform for decryption after the identification code is confirmed to be confirmed by the user. The website user identity authentication system of claim 1, wherein the authentication platform comprises: a connection unit, wherein the network device is connected to the client device and the network service platform to transmit data; The application management unit is configured to retrieve the public information, the account information, the service data, the identification code or the encrypted file; and the database unit is configured to store the identity information pre-set by the client device to use the identity information to The public information, account data, service data, identification code or encrypted file captured by the application management unit are compared. For example, the website user identity authentication system of claim 2, wherein the identity data stored in the database unit is the identity data of the client device, the identity identifier, the consumption password, the parent-child lock, and the network service platform. Account password and / or specific website service content. For example, the website user identity authentication system of claim 1 is wherein the client device is a desktop computer, a notebook computer, a personal digital assistant, and/or a mobile phone. For example, the website user identity authentication system of Patent Application No. 1, wherein the network system is an internet network, an intra-organizational network system, an inter-organizational network system, a regional network system, a wide area network system, and/or a virtual system. Private network system. For example, the website user identity authentication system of claim 1 is the audio-visual service website, the auction website, the telecommunication service website and/or the financial service website. For example, the website user identity authentication system of claim 1 of the patent scope, wherein the data encryption module is data encryption software. A website user identity authentication method is applied to a network system. The user identity authentication method of the website includes: (1) inputting account data into a user input interface of the user device to transmit the account data to the authentication platform. Perform initial authentication, and then input the identification code after the initial authentication; (2) form the encrypted account file and the identification code into the client device; (3) log in to the network service at the user device. When the platform is authenticated by the authentication platform, the public information of the client device is transmitted to the authentication platform, so that the authentication platform calculates the identification parameter through the preset rule; (4) input the identification parameter into the user terminal. a server access interface of the device, such that the authentication platform retrieves the encrypted file by the client device, the authentication platform decrypts the encrypted file and retrieves the account data to confirm the identity of the user; and (5) When the client device requests the network service platform to provide a specific service, the identifier is input into the client access interface of the client device, and the identifier is confirmed. Pass the encrypted file to decrypt the authentication platform for identification of the user. For example, the method for authenticating a user identity of a website in the scope of claim 8 includes installing data encryption software on the client device for data encryption. For example, the method for authenticating a user identity of a website in the scope of the patent application, wherein the authentication platform has a database module for storing the identity data preset by the client device, and the identity data is the identity data of the user device. , identity code, consumer password, parent-child lock, account password of the web service platform and / or specific website service content. For example, in the website user identity authentication method of claim 8, wherein the client device sets a plurality of identification codes corresponding to the plurality of service contents of the same network service platform. For example, the method for authenticating a website user identity according to claim 8 of the patent scope, wherein the client device is a desktop computer, a notebook computer, a personal digital assistant, and/or a mobile phone. For example, the method for authenticating a website user identity in claim 8 wherein the network system is an internet network, an intra-organizational network system, an inter-organizational network system, a regional network system, a wide area network system, and/or a virtual system. Private network system. For example, the method for authenticating a user identity of a website in the scope of claim 8 is wherein the online service platform is an audio-visual service website, an auction website, a telecommunications service website, and/or a financial service website.